Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.
Source: NVD ↗ · CISA KEV Catalog ↗